ROOT-OS-DEBIAN-13-CVE-2026-23078 CVE-2026-23078 in rootio-linux - Patched by Root

Root has patched CVE-2026-23078 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-23078 CVE-2026-23078 in rootio-linux - Patched by Root

Root has patched CVE-2026-23078 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-23078 CVE-2026-23078 in rootio-linux - Patched by Root

Root has patched CVE-2026-23078 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-23078 CVE-2026-23078 in rootio-linux - Patched by Root

Root has patched CVE-2026-23078 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2026-23078 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23078 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23078

A heap buffer overflow vulnerability was found in the Linux kernel's ALSA scarlett2 driver for Focusrite Scarlett audio interfaces. The scarlett2usbgetconfig function incorrectly checks the total buffer size instead of element size when performing endianness conversion. When count is greater than...

CVE-2023-23078

Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in the Assets...

CVE-2025-23078

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Breadcrumbs2 extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - Breadcrumbs2 extension: from 1.39.X before 1.39.11, from 1.41.X before...

CVE-2025-23078

creationtimestamp| type| source ---|---|--- 2025-01-10 18:03:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1188 2025-01-10 18:03:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113805375768447740 2025-01-10 18:16:08+00:00| seen|...

CVE-2025-23078 XSS in BreadCrumbs2

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Breadcrumbs2 extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - Breadcrumbs2 extension: from 1.39.X before 1.39.11, from 1.41.X before...

ManageEngine ServiceDesk Plus MSP < 14.0 Build 14000

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 14.0 Build 14000. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2023-23078 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14...

ManageEngine ServiceDesk Plus < 14.1 Build 14103

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 14.1 Build 14103. It is, therefore, affected by a vulnerability as referenced in the service-deskCVE-2023-23078 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the...

ManageEngine AssetExplorer < 6.9 Build 6987

The version of ManageEngine AssetExplorer installed on the remote host is prior to 6.9 Build 6987. It is, therefore, affected by a vulnerability as referenced in the asset-explorerCVE-2023-23078 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the...

CVE-2023-23078

creationtimestamp| type| source ---|---|--- 2023-02-01 22:14:12+00:00| seen| https://t.me/cibsecurity/57340 2025-03-27 14:27:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9099...

CVE-2023-23078

Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in the Assets...

CVE-2023-23078

Summary: CVE-2023-23078 is a cross-site scripting (XSS) vulnerability reported in Zoho ManageEngine ServiceDesk Plus 14, exploitable via the comment field when changing credentials in the Assets. Connected sources (Red Hat, Nessus, CVE lists) corroborate an XSS issue affecting SDP/Asset-related c...

CVE-2021-23078

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

CVE-2022-23078

creationtimestamp| type| source ---|---|--- 2022-06-22 16:28:33+00:00| seen| https://t.me/cibsecurity/44936...

CVE-2022-23078

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page...

CVE-2022-23078

CVE-2022-23078 affects Habitica versions v4.119.0–v4.232.2. The connected sources describe an open redirect vulnerability exploitable via the login page, with the root cause attributed to input handling that allows redirection to arbitrary URLs. Impact is described as a partial confidentiality/in...